Exchange Server: Update on ProxyShell vulnerabilities

Posted on 2021-08-10 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Unknown thread actors are scanning the Internet for Microsoft Exchange servers that are updated to March 2021 and are not protected against the ProxyLogon vulnerability. CERT-Bund warns, and calls for patching. Meanwhile, there are advanced Sigma rules for administrators to defend against attacks. And there is a script that administrators can use to check whether their own Exchange servers are vulnerable. Below I have summarized some information around this topic.

Continue reading →

Posted in Security, Software, Windows | Tagged , , | Leave a comment

Chrome/Edge 92: Problems with TLS decryption?

Posted on 2021-08-10 by guenni

[German]Question: Has anyone experienced problems with Google Chrome 92 or its Edge counterpart when the called domain starts with the letter a (Amazon, Autodesk, etc.)? The tentatively rolled out CECPQ2 may be clashing with Fortigate 6.4.5 and the overarching Palo Alto solutions.
Continue reading →

Posted in browser, issue, Software | Tagged , , | Leave a comment

Pulse Connect Secure RCE Vulnerability CVE-2021-22937

Posted on 2021-08-10 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]The ncccgroup released a Technical Advisory as of August 5 warning of the RCE vulnerability CVE-2021-22937 in Pulse Connect Secure. The Pulse Connect Secure appliance suffers from an uncontrolled archive extraction vulnerability that allows an attacker to overwrite arbitrary files, resulting in remote code execution as root. This vulnerability is a workaround to patch for CVE-2020-8260.

Continue reading →

Posted in devices, Security | Tagged , , | Leave a comment

Windows: Export/import drivers

Posted on 2021-08-10 by guenni

Windows[German]If you need to setup Windows or needs to transfer to another machine, the necessary drivers are required. Windows already comes with a set of Microsoft drivers that are installed during setup. The rest of the drivers you obtain from the manufacturer and install specifically. Wouldn't it not be cool to be able to export the drivers installed on a perfectly set up system to a folder as a backup? And how can you read back (install) the drivers from the backup folder?

Continue reading →

Posted in Windows | Tagged , | 1 Comment

Microsoft touts top-notch monthly Windows update efficiency

Posted on 2021-08-09 by guenni

Windows[German]The timely installation of security updates is a building block to protect Windows systems from the cyber threats of this time. Microsoft therefore once again advertises to its clientele that it implements or achieves a "first-class monthly Windows patch efficiency". Here, in principle, one would nod immediately if it weren't for the teeny-tiny flaw of often unreliable updates, which, unfortunately, are recurrently notable for significant collateral damage. Here's a blog post that tries to illuminate the two different worlds between Microsoft's own view and the user community's experience.

Continue reading →

Posted in Security, Update, Windows | Tagged , , | 1 Comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Exchange vulnerabilities: Will we see Hafnium II?

Posted on 2021-08-08 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Are we soon seeing a second hafnium disaster, in which Exchange servers are attacked and taken over via vulnerabilities? At the BlackHat 2021 conference, security researcher Orange Tsai spoke about new vulnerabilities in Microsoft Exchange and, in addition to old (and patched) security issues, and he lso hinted at new attack vector via known and new vulnerabilities. What has been patched so far is only the tip of an iceberg, he hinted. In addition, there are plenty of Exchange servers that are accessible via the Internet but are at a March 2021 patch level. Ingredients that could potentially bring us the next disaster with cyber attacks on Exchange servers.

Continue reading →

Posted in Security, Software, Update, Windows | Tagged , , | Leave a comment

Microsoft's plans to refresh OneNote

Posted on 2021-08-08 by guenni

[German]Microsoft has announced this week plans how to refresh its OneNote software.  There is, after all, an app for Windows 10 and there is still the classic OneNote 2016 application for the desktop, which was installed with Microsoft Office. Over the next 12 months, a series of updates are expected to bring improvements.

Continue reading →

Posted in Office | Tagged | Leave a comment

The Windows RunOnce registry key

Posted on 2021-08-08 by guenni

Windows[German]Most Windows insiders have come across the RunOnce key in the registry. Programs and services can enter a command there, which is executed once at the next Windows start and then deleted. However, Windows supports various options to force the key to be evaluated in safe mode or to prevent the entry from being deleted if the command isn't executed.

Continue reading →

Posted in Windows | Tagged | Leave a comment

Mainboard manufacturer GIGABYTE victim of RansomEXX ransomware

Posted on 2021-08-07 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]Taiwan-based motherboard manufacturer GIGABYTE has fallen victim to a ransomware attack by the RansomEXX group. The RansomEXX gang is now threatening to make captured files in the amount of 112 GBytes public unless a ransom is paid.

Continue reading →

Posted in Security | Tagged | Leave a comment

0patch fix for Windows PetitPotam 0-day vulnerability (Aug. 6, 2021)

Posted on 2021-08-07 by guenni

Windows[German]Security researchers recently disclosed a new attack vector called PetitPotam. Using an NTLM relay attack, any Windows domain controller can be taken over by attackers. Now, ACROS Security has presented a free 0Patch solution for various Windows Server versions that prevents exploitation of the vulnerability.

Continue reading →

Posted in Security, Windows | Tagged , | Leave a comment